Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/0/3138362e3230392e302e302f32302d3234203d3e203533313532.roa
File:                     3138362e3230392e302e302f32302d3234203d3e203533313532.roa (raw, json)
Hash identifier:          Z1OTAIRG8aFNYdfgSGQyOskmZFdFuW61mGzsuJwvIvc=
Subject key identifier:   9C:63:D2:03:C2:23:39:DE:00:BC:3A:25:4F:3D:EF:E3:B7:4D:83:A7
Certificate issuer:       /CN=DEEE3D28D5A12448565CED39037051D4B533893D
Certificate serial:       09E0D9972D1A8819FC43CCA84589280E2A510E59
Authority key identifier: DE:EE:3D:28:D5:A1:24:48:56:5C:ED:39:03:70:51:D4:B5:33:89:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEEE3D28D5A12448565CED39037051D4B533893D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/0/3138362e3230392e302e302f32302d3234203d3e203533313532.roa
Signing time:             Thu 21 Mar 2024 21:00:25 +0000
ROA not before:           Thu 21 Mar 2024 20:55:25 +0000
ROA not after:            Thu 20 Mar 2025 21:00:25 +0000
asID:                     53152
IP address blocks:        186.209.0.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:e0:d9:97:2d:1a:88:19:fc:43:cc:a8:45:89:28:0e:2a:51:0e:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEEE3D28D5A12448565CED39037051D4B533893D
        Validity
            Not Before: Mar 21 20:55:25 2024 GMT
            Not After : Mar 20 21:00:25 2025 GMT
        Subject: CN=9C63D203C22339DE00BC3A254F3DEFE3B74D83A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7a:c8:4f:5d:66:56:1a:b6:87:0a:64:a4:6e:
                    b7:69:63:81:e2:d3:ed:74:08:67:42:c1:3b:2a:30:
                    0d:d7:d1:be:64:62:63:01:b2:34:42:b1:f8:cc:d4:
                    5f:4f:bf:cf:84:1c:0d:13:0c:d2:d3:4e:fb:9e:34:
                    6a:08:28:7f:32:be:75:48:34:b9:05:d3:5a:01:3c:
                    cb:f9:55:1f:ae:e5:24:51:31:c2:06:00:de:46:36:
                    52:c3:27:2a:c6:8f:52:f8:0e:bb:be:24:98:5b:89:
                    5a:b1:64:d6:02:b4:71:53:f2:aa:a2:1b:b7:2e:d6:
                    a5:ff:ce:21:56:ed:0e:e9:9c:30:a7:d0:46:9f:31:
                    01:bd:66:d1:e5:c9:72:71:f9:47:2b:97:b9:e6:81:
                    b0:e8:01:14:b3:27:27:60:b0:7f:9d:31:1b:24:31:
                    f9:bf:fd:b6:42:c8:ea:eb:a5:ac:0d:8c:5d:92:2f:
                    64:ad:20:39:4f:fc:94:44:ed:58:e4:3f:2c:4b:2e:
                    69:ab:b9:92:85:19:9f:dd:38:df:45:1c:ff:04:b6:
                    b9:41:63:50:e5:1d:81:ce:50:e0:1e:49:5e:53:5b:
                    c3:22:b4:a0:41:72:de:9a:57:b4:12:9d:28:03:f7:
                    56:c5:a5:2a:80:ac:8b:ee:65:1c:ad:67:1e:f0:31:
                    b4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:63:D2:03:C2:23:39:DE:00:BC:3A:25:4F:3D:EF:E3:B7:4D:83:A7
            X509v3 Authority Key Identifier:
                keyid:DE:EE:3D:28:D5:A1:24:48:56:5C:ED:39:03:70:51:D4:B5:33:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/0/DEEE3D28D5A12448565CED39037051D4B533893D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEEE3D28D5A12448565CED39037051D4B533893D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/0/3138362e3230392e302e302f32302d3234203d3e203533313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         34:64:3f:68:7a:d8:8f:4e:36:ae:aa:7d:14:cc:52:22:34:53:
         46:1d:2f:52:96:c3:88:4c:d6:83:f5:27:cf:a4:65:7f:56:af:
         27:aa:7b:8b:08:a0:ec:8a:f5:e2:d5:73:29:cc:b1:3e:6d:79:
         4a:88:a2:05:a4:6f:fd:6a:c6:ff:90:e4:ad:81:58:eb:ad:91:
         37:04:5b:9d:d4:5d:0e:b3:8b:60:eb:d6:dc:71:ef:25:db:ed:
         8f:51:3d:d1:24:92:3e:f1:20:ad:d8:6e:0f:cf:f8:cc:8f:ac:
         20:1e:b1:00:29:df:6f:dd:37:04:6c:7f:24:9f:60:24:65:04:
         4f:93:a9:b0:cd:44:7a:56:0d:f6:91:1f:60:0b:5e:25:79:a5:
         95:bc:9d:88:08:4b:f2:54:d9:ee:79:84:ec:32:7c:61:c5:f2:
         25:63:ce:eb:b5:2d:f6:1e:2c:e0:06:ad:b0:dd:ef:99:74:10:
         68:79:1d:ca:b5:38:29:37:10:c4:8b:db:c1:6b:53:de:ed:3c:
         95:68:a0:0c:4c:41:85:54:67:d6:28:27:6a:0a:55:90:69:75:
         da:0a:c9:ba:6f:1f:e3:1b:5a:60:b1:e2:4d:25:93:4c:db:91:
         29:77:9e:f6:fd:75:e6:90:4f:6f:f5:8e:c6:ea:cd:52:91:c3:
         f5:d9:83:da
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUCeDZly0aiBn8Q8yoRYkoDipRDlkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVFRTNEMjhENUExMjQ0ODU2NUNFRDM5MDM3MDUxRDRC
NTMzODkzRDAeFw0yNDAzMjEyMDU1MjVaFw0yNTAzMjAyMTAwMjVaMDMxMTAvBgNV
BAMTKDlDNjNEMjAzQzIyMzM5REUwMEJDM0EyNTRGM0RFRkUzQjc0RDgzQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmeshPXWZWGraHCmSkbrdpY4Hi
0+10CGdCwTsqMA3X0b5kYmMBsjRCsfjM1F9Pv8+EHA0TDNLTTvueNGoIKH8yvnVI
NLkF01oBPMv5VR+u5SRRMcIGAN5GNlLDJyrGj1L4Dru+JJhbiVqxZNYCtHFT8qqi
G7cu1qX/ziFW7Q7pnDCn0EafMQG9ZtHlyXJx+Ucrl7nmgbDoARSzJydgsH+dMRsk
Mfm//bZCyOrrpawNjF2SL2StIDlP/JRE7VjkPyxLLmmruZKFGZ/dON9FHP8EtrlB
Y1DlHYHOUOAeSV5TW8MitKBBct6aV7QSnSgD91bFpSqArIvuZRytZx7wMbRbAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUnGPSA8IjOd4AvDolTz3v47dNg6cwHwYDVR0j
BBgwFoAU3u49KNWhJEhWXO05A3BR1LUziT0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFhtZ2tXTVFTbWs5NjdDcEJFc3RYMngxYmlOVTVGWXVhaWJvWDZjSE1K
QmkvMC9ERUVFM0QyOEQ1QTEyNDQ4NTY1Q0VEMzkwMzcwNTFENEI1MzM4OTNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RFRUUzRDI4RDVBMTI0NDg1
NjVDRUQzOTAzNzA1MUQ0QjUzMzg5M0QuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRYbWdrV01RU21rOTY3Q3BCRXN0WDJ4MWJpTlU1Rll1YWlib1g2Y0hNSkJpLzAv
MzEzODM2MmUzMjMwMzkyZTMwMmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzUzMzMx
MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBLrRADANBgkqhkiG9w0BAQsFAAOCAQEANGQ/aHrYj042
rqp9FMxSIjRTRh0vUpbDiEzWg/Unz6Rlf1avJ6p7iwig7Ir14tVzKcyxPm15Soii
BaRv/WrG/5DkrYFY662RNwRbndRdDrOLYOvW3HHvJdvtj1E90SSSPvEgrdhuD8/4
zI+sIB6xACnfb903BGx/JJ9gJGUET5OpsM1EelYN9pEfYAteJXmllbydiAhL8lTZ
7nmE7DJ8YcXyJWPO67Ut9h4s4AatsN3vmXQQaHkdyrU4KTcQxIvbwWtT3u08lWig
DExBhVRn1ignagpVkGl12grJum8f4xtaYLHiTSWTTNuRKXee9v115pBPb/WOxurN
UpHD9dmD2g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org